Data Engineering Data Governance and Security 2 — Questions and Answers
Question 1: Which encryption approach protects data while it is stored on disk in a data warehouse?
- Encryption at rest (Correct answer)
- Encryption in transit
- TLS handshake
- Token bucketing
Correct answer: Encryption at rest
Encryption at rest secures data persisted on storage media.
Question 2: What is the primary purpose of column-level masking in a database?
- Hide sensitive field values from unauthorized users (Correct answer)
- Compress columns to save space
- Index columns faster
- Replicate columns across nodes
Correct answer: Hide sensitive field values from unauthorized users
Masking obscures sensitive values so unauthorized users see redacted data.
Question 3: Which regulation governs the protection of personal data for residents of the European Union?
- GDPR (Correct answer)
- HIPAA
- SOX
- PCI DSS
Correct answer: GDPR
GDPR is the EU's general data protection regulation.
Question 4: What does the principle of least privilege require?
- Grant users only the access they need to do their job (Correct answer)
- Give all users admin rights
- Disable all access by default permanently
- Share one account across the team
Correct answer: Grant users only the access they need to do their job
Least privilege limits access to the minimum necessary.
Question 5: Which technique replaces sensitive values with non-sensitive surrogates that can be mapped back via a secure vault?
- Tokenization (Correct answer)
- Normalization
- Partitioning
- Caching
Correct answer: Tokenization
Tokenization substitutes data with tokens stored separately.
Question 6: What is a data catalog primarily used for in governance?
- Discovering and documenting metadata about data assets (Correct answer)
- Encrypting backups
- Load balancing queries
- Scheduling ETL jobs
Correct answer: Discovering and documenting metadata about data assets
A data catalog organizes metadata to make data discoverable.
Question 7: Which standard specifically governs the handling of credit card payment data?
- PCI DSS (Correct answer)
- GDPR
- HIPAA
- FERPA
Correct answer: PCI DSS
PCI DSS sets security requirements for payment card data.
Data Engineering Data Governance and Security 2
Which encryption approach protects data while it is stored on disk in a data warehouse?